2025

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3.

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allo

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue a

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web U

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sen

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990,

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990,

In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdev_r

In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesyste

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroy

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio un

IBM Concert Software 1.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force

A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary c

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't flush non-uploaded STAs If S

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usb_drive

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject mismatching sum of fie

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpf_timer through kworker f

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Comm

In the Linux kernel, the following vulnerability has been resolved: bpf: bpf_local_storage: Always use bpf_mem_alloc in

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses modul

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately

In the Linux kernel, the following vulnerability has been resolved: staging: media: max96712: fix kernel oops when remo

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort F

A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been ra

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sens

Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute a

Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch priv

Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5

Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows) versions prior to v8.1.

Emissary is a P2P based data-driven workflow engine. The ChecksumCalculator class within allows for hashing and checksum

Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts

A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the de

Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_d

Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass

OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 coul

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to eleva

Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packe

A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authen

Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be perfo

Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vuln

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi